General

  • Target

    2fee5ba01e1e68d4bd21a4498dc99cf6b072443e1e2743ed233ae21eea8258e8

  • Size

    99KB

  • MD5

    da5bdb5aff59416633b2105ad7924801

  • SHA1

    564b158efb5b50edf1ccdfab0b3eb24e4b3544e4

  • SHA256

    2fee5ba01e1e68d4bd21a4498dc99cf6b072443e1e2743ed233ae21eea8258e8

  • SHA512

    dc125ebad4d6e34f469b1bb7d9329a900e1d24c88e7eae13f7f9cda0133b3c675b9871c10838bbb287d8908494276858f683655228129794c348b8fbee8fd586

  • SSDEEP

    1536:0Ij42yUN3HZUR5WnPszr0MBEJVLcZL82ZTBv2caHwaCB284O+6n:xeUJHZU5WPLMBEJlcGE7aHwa

Score
10/10
upx

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Detects executables referencing many IR and analysis tools 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2fee5ba01e1e68d4bd21a4498dc99cf6b072443e1e2743ed233ae21eea8258e8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections